pipeairdrop[.]xyz

The domain pipeairdrop.xyz is identified as a brand impersonation threat, specifically targeting 'across'. It is currently offline. The domain was designed to mimic legitimate operations of 'across' by using misleading page titles such as 'PIPE Token Airdrop | Decentralized CDN' to deceive users into believing they are interacting with a legitimate service. Its offline status does not diminish the threat it posed while active.

Analysis indicates that pipeairdrop.xyz resolves to the IP address 45.12.2.67. The domain was registered through Ultahost, Inc. on October 15, 2025. VirusTotal shows that 5 out of 95 security vendors have flagged this domain as malicious, highlighting its potential risk. Furthermore, the domain appears on one security blocklist and has been specifically blocked by PhishDestroy. It has an extremely low trust score of 0/100 as per Gridinsoft, emphasizing its fraudulent nature.

Given its current offline status, the immediate threat from pipeairdrop.xyz is mitigated. However, the history of malicious activity suggests a need for continued vigilance. It is recommended that users remain cautious of similar domains and verify the authenticity of sites before providing any personal or financial information. Security teams should ensure that 'across' brand monitoring continues to anticipate possible future threats. Additionally, incorporating domain monitoring tools to detect similar impostor domains early can enhance protective measures.